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5 m i ysfom i> i i*f o 

i-Nl FI m m-.. ' ww -"-!. * v mow Dm •■" » os, ; Am ’W< emekv ,lh x k s\ ' 

1, INTORMA TIOIS ABOUT THE SYSTEM / PROJECT 

L Provide a general description of the system or project that indndes: mam nf the systea-dprojeek 
including associated acronyms; strmturz of iht system/projeek purpose; mi Bar* of ihe mfammikm 
m the system and how H will ho used; who will hove access to the iMtnmmtion i» fbe system s«id the 
so u *u? of w swum-m ?t t nib i v * < t ^ in " 

Plan, if available. or ikon a Concept of Operations document, nod can bo cut and pasted here.}: 

The Document Capture Sysiemdutorim Central Records Complex ; DCS-1CRO tv a dosed Information 
system and independent of ail other Information systems. The -mission of tire DCS-ICRC ts to provide a 
document, imaging capability to convert with the required throughput speed and quality. paper documents 
, t „ o \w v v m vx s ^ v fo ! > J 

X vx 1 ' V O \ U _ X X _ ^ ' > )v 

National Naum Check Program INNCP), the Freedom of Information and Privacy Act (FOIPA) Program, 
tire Records Inventors Project ah f Bl. Divisions and all FBI Field Offices. The software applications tor 
image capture. Image enhancement, image quality assurance, and the relational database arc tumor 
components of the system archhecm.ro asm dictate the type of hardware used by the system. The output of 
the DCS-fORC provides data lor input in.ro other FBI systems. The output is digital representations of 
documents that cao be rapidly and efficiently retrieved, searched, anti analysed, hr some cases, these 
electronic images oil; become ofikiai FBI irks ami will be managed trader appropriate policies and 
directives. Data created by tire DCNCCRC is delivered w customers on CDROM or other removable 
media. Only designated personnel may transfer data hem the DCSHCRC to removable media. After the 
digits! images are converted,, they are removed hour the system and returned to tire requesting customer. 

2. shoes the xystem.-payeet collect, maintain, or dtssemhtate any information about individuals la 
identifiable form. i.o.. is information linked to or linkable to specific individuals iwhiek is tire definition 
of personally identifiable information t Pill))? 

.NO. Ilf no, STOP. The PTA Is now complete and after division apfmtvaifo} shook! be 

submitted to FBI 0€»€7P€LIJ for final FBI approval. Unless yon are otherwise advised, no 
PI A rs required,! 

V !::'>• [If yes, please continue, j Although the project, techmeaby, col leers PH from haul 
cony paper a- a mnems and transfers it to digital form, the purpose of the project is 
simply to convert paper records to electronic records lor sfortfoe, maintenance and 
rise of FBI divisions that seek out this service. To the extent that privacy 
documentation is required for these records, the responsibility Iks with these 
divisions. 

T. Does the systenYproject pertain, only to government employees, contractors, or consultants'? 

.X.NO. .YES. 

4. Is information ehottr Lmued States eitfoens or lawfully admitted permanent resident aliens retrieved 
from the sysieni/prqiect by- name or other personal identifier? 


TNCLASSinKU/FOtU 
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Are Social Security Numbers t SSNs• collected, maintained or disseminated trout the .system/pro; eet? 
NO, X VE$> If yes, cheek all that apply: 

SSNs are accessary to esiabhsfoeonfirm the identity oif subjects, victims, witnesses 

SSNs are neecssary to identify FBI personnel to this internal administrative system, 

X SSNs arc important for other reasons. Deserihe: 
if they arc a part of the evidence received front FBI casesfoivesogatlorm the SSNs 
are rood for the purpose of foe specific case. 

. The systeuv project. provides special protection to SSNs foe.. SSNs ate encrypted, 

hidden kora all users via a a look-op table, or only available to certain usersj. Describe: 

it is not feasible for the sysiern/proreci to provide special protection to SSNs. 
Explain:; 

Df-amfo- Ov ^ ' s t f \ < o v. v ‘ v. v 

X NO. Ilf no, proceed, to question ?.] 

.YES. 

a. Does the systeuifonneci support criminal, CT, or PC! investigations or assessments;? 

.YES. Ilf yes, proceed in question 7q 

.NO. 

h. Are subjects of information horn whom the information is directly collected provided a written 
Privacy Act (e)Q) statement teither on the collection form, or via a separate notice)? 

.NO. fThe program will need in work with POJj to devefop/impfoment the 

necessary formfohj 

.YEN Identify any forms, paper or electron up used to request such 

Information from the informatkm subject: 

l ias foe system undergone Ce.rdheab.on At Accreditation. (CdtA) by rim f Bt Security Division (SecDV? 
. NO If «<)> Indicate reason; If C&A Is ponding, provide antidpsted completion date; 

I NE i,. ANSI FI if il/EO E 0 
4 
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i:N<:i..ASsLi-ii<:o/FO^o 

FBI. PTAr Doca-asus I. upturn Sys tern-'Interim Cent's) Records Complex :;DCbdCRv s 

\ N x It U''< >!^uk >. w CSt \ us A vain ' 'e~<. 4 .rtd~n> ho 


Don't Know. 


-R Is this syotom/projeot the subject of an OMIA|§| budget oobmtsDon? 

NO. \ x v .YES. If yes, please provide the date 

and name or 1 st I* of the 0 MB submission: 


ff 0 this o national secerns system (as determined by the becDV; 


I if Siotax of System/ Project: 

' x v mo v V wov um Js whhnx s| Of , h 

FT A is now complete and alter division approvafis) shoo hi be submitted to FBI 
OOC/PO.,0 for final FBI approval and determination If PI A and/or other actio ns are 
rerp.dred ,| 


IF FXIS i INN Nb SI I-.MN . P.BOJIX IT 

2. Han the system/jmoject undergone ary sicnifieam. changes shier April i ?. 2003° 

\ \w i f ne ''"v-eee O'next vsevstect tii D ' 

N " o ^ s v s s !o v ss m i. s atk d, Ki\<s that 

apply}: 

A conversion Irens paper-based records to an electronic system. 

A change information in a format that is anonymous or noroldentriiabie to a 
vmxu th n o .donofi t-D m pamc she < hiu.J 

A ne w ose of an IT system/prejeex mcUsdrng application of a new technology, that 
changes- how ?rdormaUon m tdfhfHahle form rs maoaaed. D or example. a cbaaac 
that xeould create a more one a environment and/or avenue for exposure of data tom 
previously did not exist:. ! 

A change that results in information In identifiable form helm:/ meraed., central seed., 
or matched with other databases. 


rN(::i...ANSiFiEB/i ; <>i/o 
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i m i roi o 

FBI PTA: Document Capture Syneae-biterlm Central Records Complex (DCSdCRO 

a new method of nndtemicas.mg the use of and access to kslonnatkm in sdmurhable 
form by members of the public. 

A systematic Incorporation of databases of Inffrrmahon to identifiable iorm 
y.cdo'ul v'- <'Hmvd 'Vom A wmetcl.d o: p.odh Mmk\-- 

A now mtorauenev use or shared spoor forscdoa that results in new uses or 
s oH ueVruitwn to EYriiThXc ruse 

A change that results in a now use or disclosure of mbs rots; ion ta identifiable term. 

A change that results in new items of infrmnadon in identifiable ions; being added 
to to t he ays tesri-pn-j eel. 

* vooi m ' Jo* a > m \e - va w b . > ' 

on whom records arc maintained. or the use or dissemination of information front 
the system-pro Dee 

Other. [Provide brief 


a Does a FI A tor this system/prpiect already exist? NO. X YES. if vest 

a. than ide dam rule of the PI >a" 

Privacy Threshold Analysis Err the Document Capture System-koerirn Centra! Records Complex 

b. I hi-: the system/project 'undergone any significant chances since the PLY? X NO. YES 

ffhe Ff A is now complete and alter division approvaifsi should bo submitted, to FBI OifC/PCLC for 
final FBI approval and determination If FI A and/or other actions are required J 
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(OGC/PCLU (Rev. 05/15/09) 


FBI PRIVACY THRESH OLD ANALYSIS (PTA) 

(equivalent to the DOJ Initial Privacy Assessment (IPA)) 


NAME OF SYSTEM / PROJECT: Easy Lobby SVM 9.0 


Dr: rived Ftorot 

SYSTEM/PROJECT POC 

FBI OGC/PCLU POC 

Classified By; 

Name: 

Name: 

Reason; 

Program Office: 

Phone: 

Declassify On: 

Division: 

Room Number: 


Phone: 



Room Number: 



FBI DIVISION INTERMEDIATE APPROVALS 



Program Manager (or other appropriate executive as 

Division determines) 

Division Privacy Officer 

Program Division: 

Signature:/s/ 

Signature:/s/ 

Jacksonville 

Date signed: 10/5/09 

Date signed: 10/5/09 


Name] j 

Name:| ' j 


Title: SSA CSO 

Title: A/ADC 

FBIHQ. Division: 

Signature: 

Signature: 

[insert division name] 

Date signed: 

Date signed: 


Name: 

Name: 


Title: 

Title: 


After all division approvals, forward signed hard copy plus electronic copy to FBI OGC/PCLU ({EH 7338), 

(The FBI Privacy and Civil Liberties Officer's determinations, conditions, and/or final approval will be recorded on the following page.) 

Upon final FBI approval, FBI OGC/PC.IJj will distribute as follows: 


1 - Signed origi nal to file 190-HQ.-C1321794 (fwd to JEH 1B204 via PA-520) 

Copies (recipients please print/reproduce as needed for Program/Division file(s)): 

1 - DOJ Office of Privacy and Civil Liberties (via e-mail to privacy(£>usdoj.gov) 

(if classified, via hand delivery to 1331 Penn.Ave. NW, Suite 940,20530) 

2 - FBI OCIO / OIPP (JEH 9376,attn {~ \ _ 

1 - FBI SecD/AU (elec, copy: via e-mail to UC | | 

1 - RMD/RMAU (attn j | 

2 - Program Division POC/Privacy Officer 
2 - FBIHQDivision POC/Privacy Officer 


1 -OGC\PCLU intranet 
1 -PCLU UC 
1 -PCLU Library 
1 - PCLU Tickler 


b6 

b7C 
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NAL FBI APPROVAL / DETERMINATIONS / CONDITIONS: [This section will he completed by the FBI PCLU/PCtO folkw 
I'A drafter should skip to the next page and continue.] 


i_ PIA is required by the E-Government Act. 


_ PIA is to be completed as 


Is PIA to be published on FBI.GOV (after any RMD FOIA redactions)? X Yes. 


_ PIA is not required for the following reason(s): 

_System does not collect, maintain, or disseminate Pll. 

_System is grandfathered (in existence before 4/17/2003; no later changes posing significant privacy risks). 

_Information in the system relates to internal government operations. 

_System has been previously assessed under an evaluation similar to a PIA. 

_No significant privacy issues (or privacy issues are unchanged). 

_Other (describe): 


Applicable SORN(s): _|ustice/FBI-013 Security Access Control Systf 


Notify FBI RMD/RIDS per MIOG 190.2.3? _No X Y es-See sample EC on PCLU intranet website here: 

http:/7liorr;e/DO/OGC/LTB/PCLU/PrivacvGvil%20Liberties%20LiLirarv/fcrm for miogl 90-2-3 ecwpd 


SORN/SORN revision(s) required? X No 


Prepare/revise/add Privacy Act (e)(3) st 
Form already prrepared 


RECORDS. The program should consult with RMD to identify/resolve any Federal records/electronic records issues. The system may contain Federal 
records whether or not it contains Privacy Act requests and, in any event, a records schedule approved by the National Archives and Records Administratioi 
is necessary. RMD can provide advice on this as well as on compliance with requirements for Electronic Recordkeeping Certification and any necessary 


David C. Larson, Deputy General Counsel 
FBI Privacy and Civil Liberties Officer 


Signature: /s/ 

Date Signed: 5/20/2010 
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FBI PTA: Easy Lobby SVM 9.0 


I. INFORMATION ABOUT THE SYSTEM / PROJECT 

1. Provide a general description of the system or project that includes: name of the system/project, including associated 

acronyms; structure of the system/project, purpose; nature of the information in the system and how it will be used; who will have 
access to the information in the system and the manner of transmission to al users. 

Easy Lobby SVM 9.0 is a commercial product that will be used to assist the receptionist and the security officer track visitors to the 
Jacksonville held office. Housed within secure space will be art identification card reader that will scan the driver’s license (Dl) of 
entering visitors. The software installed on a stand-alone computer will then use the scanned information to fill certain data fields. 
Including name, address DOB, etc. and capture the photograph on the license. This information will be used to print a visitor badge for 
• he individual. This information will also be stored in a Microsoft Access database log for quick retrieval on future visits, and to permit 
tracking of Visitors. The system will essentially replace the current system of logging visitors on a clipboard and providing them with 
hand written badges. It is anticipated that the information will be retained for approximately oneyear. 

Access to the system will be limited to the Chief Security Officer, Security Assistants and Receptionists. 

Please see software information booklet, and company information attached at A. 

2. Does the system/project collect, maintain, or disseminate any information about individuals in identifiable form, i.e., is information 
linked to or linkable to specific individuals (which is the definition of personally identifiable information (Pll))? 

_NO. [If no, STOP. The PTA is now complete and after division approvai(s) should be submitted to FBI 

OGC/PCLU for final FBI approval. Unless you are otherwise advised, no P1A is required,] 

_X_ YES. [Ifyes, please continue.] 


3. Does the system/project pertain only to government employees, contractors, or consultants? 

_X_NO. _YES. 


4. Is information about United States citizens or lawfully admitted permanent resident aliens retrieved from the system/project by 
name or other personal identifier? 

_NO. _X_YES. 


5. Are Social Security Numbers (SSNs) collected, maintained or disseminated from the system/project? 
_X NO. _YES. If yes, check all that apply: 

_SSNs are necessary to establish/confirm the identity of subjects, victims, witnesses 

or sources in this law enforcement or intelligence activity. 
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FBI PTA: Easy Lobby SVM 9.0 


_SSNs are necessary to identify FBI personnel in this internal administrative system. 

_SSNs are important for other reasons. Describe: 

_The system/project provides special protection to SSNs (e.g.,SSNs are encrypted, hidden from all users via a 

look-up table, or only available to certain users). Describe: 

_It is not feasible for the system/project to provide special protection to SSNs. Explain: 

6. Does the system/project collect any information directly from the person who is the subject of the information? 

_NO. [If no, proceed to question 7.] 

_X_ YES. They provide the DL identification card and the basis for their visit to the field office. 

a. Does the system/project support criminal, CT, or FCI investigations or assessments? 

_YES. [Ifyes, proceed to question 7.] 

_X_NO. 


b. Are subjects of information from whom the information is directly collected provided a written Privacy Act (e)(3) 

statement (either on the collection form or via a separate notice)? 

_NO. [The program will need to work with PCLU to develop/implement the necessary form(s).] 

_X_YES. Identify any forms, paper or electronic, used to requestsuch 
information from the information subject: See attachment B. 

7. Has the system undergone Certification & Accreditation (C&A) by the FBI Security Division (SecD)? 

_X_ NO. If no, indicate reason; if C&A is pending, provide anticipated completion date: 

_YES. If yes, provide date of last C&A certification/re-certification: 

_Don't Know. 

8. Is this system/project the subject of an OMB-300 budget submission? 

X NO. _Don't know. _YES. Ifyes, please provide the date and name or 

title of the OMB submission: 


9. Is this a national security system (as determined by the SecD)? 

_X_ NO. _YES. _Don't know. 


10. Status of System/Project: 
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FBI PTA: Easy Lobby SVM 9.0 


_X_ This is a new system/ project in development. The hardware (identification card scanner, computer badge 
printer and stand alone computer would be used in conjunction with a prepackaged software kit. 

checked this block, STOP. The PTA is now complete and after division approvai(s) should be submitted to FBI 
OGC/PCLU for final FBI approval and determination if PIA and/or other actions are required .] 
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FBI PTA: Easy Lobby SVM 9.0 


il. EXISTING SYSTEMS/ PROJECTS 
1, When was the system/project developed? 


Has theses 


rn/projea undergone any significant changes since April 17,2003? 

NO. [if no, proceed to next question (11.3).] 

YES. if yes, indicate which of the following changes were involved (mark all boxes that apply): 
_ A conversion from paper-based records to an electronic system. 


A change from information in a format that is anonymous or non-identifiahie to a format that is identifiable to 
particular individuals. 

A new use of an IT system/project, including application of a new technology, that changes how information 
in identifiable form is managed (For example, a change that would create a more open environment 
and/or avenue for exposure of data that previously did not exist.) 

A change that results in information in identifiable form being merged, centralized, or matched with other 
databases. 

A new method of authenticating the use of and access to information in identifiable form by members of the 
public. 

A systematic incorporation of databases of information in Identifiable form purchased or obtained from 
commercial or public sources. 


A new interagency use or shared agency function that results in new uses or exchanges of information in 
identifiable form. 


A change that results in a new use or disclosure of information in identifiable form. 

A change that results in new Items of information in identifiable form being added into the system/project 

Changes do not Involve a change in the type of records maintained, the individuals on whom records are 
maintained, or the use or dissemination of information from the system/project. 

Other. [Provide brief explanation]; 


3. Does a PIA for this system/project already exist? 


NO. .YES. If yes: 


a. Provide date/titie of the PiA; 


b. Idas the system/project undergone any significant changes since the PiA? _NO. _YES. 

[The PTA is now complete and after division approval(s) should be submitted to FBI OGC/PCLU for final FBI approval and 
determination if PiA and/or other actions are required .] 
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UNCLASSIFIED//FOR OFFICIAL USE ONLY 


(OGC/PCLU (Rev. 05/15/09) 


FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

(Equivalent to the DOJ Initial Privacy Assessment (IPA)) 

b3 


NAME OF SYSTEM / PROJECT: [ 


Derived From:: 

SYSTEM/PROJECT POC 

FBI OGC/PCLU POC 

Classified By: 

Name:| | 

Name: 

1 

Reason: 

Program Office: NSPU 

Phone: 


Declassify On: 

Division: OIPM 

Phone] I 

Room Number: 9664 

Room Number: 7458 


FBI DIVISION INTERMEDIATE APPROVALS 



Program Manager (or other appropriate 
executive as Division determines) 

Division Privacy Officer 

Program Division: 

CTD 

Signature: /s/ 

Date signed: 11/5/2009 

Name] 1 

Title: Unit Chief, PDEU 


FBIHQ Division: 

OIPM 

Signature: /s/ 

Date signed: 11/10/2009 

Name] I 

Title: Unit Chief, NSPU 

Signature: /s/ 

Date signed: 11/12/2009 

Name] 1 

Title: OIPM Privacy Officer 


After all division approvals, forward signed hard copy plus electronic copy to FBI OGC/PCLU (JEH 7338). 

(The FBI Privacy and Civil Liberties Officers determinations, conditions, and/or final approval will be recorded on the 
following page.) 

Upon final FBI approval, FBI OGC/PCLU will distribute as follows: 

1 - Signed original to file 190-HQ-C1321794 (fwd to JEH 1B204 via PA-520) 

Copies (recipients please print/reproduce as needed for Program/Division file(s)): 


1 - DOJ Office of Privacy and Civil Liberties (via e-mail to 
privacy@usdoj .gov) 

(if classified, via hand delivery to 1331 Penn. Ave. NW, Suite 940, 
20530) 

2 - FBI OCIO / OIPP (JEH 9376. attn:l i 

1 - OGC\PCLU intranet 
1 - PCLU UC 

1 - PCLU Library 

1 - PCLU Tickler 

1 - FBI SecD/AU (elec, copy: via e-mail to UC| \ 

b6 

1 - RMD/RMAU (attn:| ] 

2 - Program Division POC /Privacy Officer 

2 - FBIHQ Division POC /Privacy Officer 

b7C 


UNCLASSIFIED//FOR OFFICIAL USE ONLY 
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UNCLASSIFIED//FOR OFFICIAL USE ONLY 


FINAL FBI APPROVAL / DETERMINATIONS / CONDITIONS: 


X PIA is required by the E-Government Act. 

_PIA is to be completed as a matter of FBI/DOJ discretion. 

Is PIA to be published on FBI.GOV (after any RMD FOIA redactions)? _Yes. _No (indicate reason): 


PIA is not required for the following reason(s): 

_System does not collect, maintain, or disseminate PII. 

_System is grandfathered (in existence before 4/17/2003; no later changes posing significant privacy risks). 

_Information in the system relates to internal government operations. 

_System has been previously assessed under an evaluation similar to a PIA. 

_No significant privacy issues (or privacy issues are unchanged). 

_Other (describe): 


Applicable SORN(s): _ under development _ 

Notify FBI RMD/RIDS per MIOG 190.2.3? _No _Yes—See sample EC on PCLU intranet website here: 

http://home/DO/OGC/LTB/PCLU/PrivacyCivil%20Liberties%20Library/form_for_miogl90-2-3_ec.wpd 

SORN/SORN revision(s) required? _No _Yes (indicate revisions needed): 


Prepare/revise/add Privacy Act (e)(3) statements for related forms? _No _Yes (indicate forms affected): 


RECORDS. The program should consult with RMD to identify/resolve any Federal records/electronic records issues. 
The system may contain Federal records whether or not it contains Privacy Act requests and, in any event, a records 
schedule approved by the National Archives and Records Administration is necessary. RMD can provide advice on this 

as well as on compliance with requirements for Electronic Recordkeeping Certification and any necessary updates. _ 

Other: 


David C. Larson, Deputy General Counsel Signature: /s/ 

FBI Privacy and Civil Liberties Officer _ Date Signed: 11/15/2009 


UNCLASSIFIED//FOR OFFICIAL USE ONLY 
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UNCLASSIFIED//FOR OFFICIAL USE ONLY 


I. INFORMATION ABOUT THE SYSTEM / PROJECT 

1. Provide a general description of the system or project that includes: name of the 
system/project, including associated acronyms; structure of the system/project, 
purpose; nature of the information in the system and how it will be used; who will 
have access to the information in the system and the manner of transmission to al 
users. 


The purpose of thej Iprojectisto 

support the mission of the FBI’s| | 

b3 

b7E 

| | as it relates to 

the FBI’s mission. 


b3 

b7E 


The nature of information contained within this system includes names of 
individuals and other related Personally Identifiable Information (PII). This information 
originates from FBI, Other Government Agencies (OGA), commercial data providers and 
is consolidated at FBI for analysis. 


The system will be accessible from the FBFsf 



—; i 


_|will restrict access to the 


system to those FBI agents and analysts, contractors, and task force officers (TFOs) 
cleared by the program manager and possessing the appropriate level of security 
clearance necessary (i.e. Top Secret/Sensitive Compartmented Information). Policy-based 
access controls will f urther r estrict user access to info rmation within the system. There 
will be approximately! individuals with access to| j 


2. Does the system/project collect, maintain, or disseminate any information about 
individuals in identifiable form, i.e., is information linked to or linkable to specific 
individuals (which is the definition of personally identifiable information (PII))? 
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_NO |If no, STOP. T'he FT A is now complete and after division approvals) 

should he submitted to FBI OGC/PCLU for final FBI approval. Unless you are 
otherwise advised, no PIA is required.) 

X YES [If yes, please continue.] 


3. Does the system/project pertain only to government employees, contractors, or 
consultants? 

X NO _YES 


4. Is information about United States citizens or lawfully admitted permanent resident 
aliens retrieved from the system/project by name or other personal identifier? 

_NO X YES 


5. Are Social Security Numbers (SSNs) collected, maintained or disseminated from the 
system/project? 

_NO X YES If yes, check all that apply: 


X SSNs are necessary to establish/confirm the identity of subjects, victims, 
witnesses or sources in this law enforcement or intelligence activity. 


_SSNs are necessary to identify FBI personnel in this internal administrative 

system. 


_SSNs are important for other reasons. Describe: 

_The system/project provides special protection to SSNs (e g., SSNs are 

encrypted, hidden from all users via a look-up table, or only available to certain 
users). Describe: 

X It is not feasible for the system/project to provide special protection to 
SSNs. Explain: The possibility exists that due to secondary reporting, PII may be 
collected and appear in the system and cannot be blocked so that the identification 
of potential subjects may occur. 
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6. Does the system/project collect any information directly from the person who is the 
subject of the information? 

X NO [If no, proceed to question 7.] 

_YES 


a. Does the system/project support criminal, CT, or FCI investigations or 
assessments? 


YES [If yes, proceed to question 7 ] 
NO 


b. Are subjects of information from whom the information is directly collected 
provided a written Privacy Act (e)(3) statement (either on the collection form or via a 
separate notice)? 

_NO [The program will need to work with PCLU to develop/implement 

the necessary form(s).] 

_YES Identify any forms, paper or electronic, used to request such 

information from the information subject: 

7. Has the system undergone Certification & Accreditation (C&A) by the FBI Security 
Division (SecD)? 

X NO If no, indicate reason; if C&A is pending, provide anticipated 
completion date: New system/project in development. 

_YES If yes, provide date of last C&A certification/re-certification: 


_Don't Know. 

8. Is this system/project the subject of an OMB-300 budget submission? 

X NO _Don't know _YES If yes, please provide 

the date and name or title of the 
OMB submission: 

9. Is this a national security system (as determined by the SecD)? 

_NO X YES _Don't know 
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10. Status of System/ Proj ect: 

X This is a new system/ project in development. [If you checked this block, 
STOP. The PTA is row complete and after division approval(s) should be 
submitted to FBI OGC/PCLU for final FBI approval and determination if 
PIA and/or other actions are required.] 

11. EXISTING SYSTEMS / PROJECTS 

1. When was the system/project developed? 

2. Has the system/project undergone any significant changes since April 17, 2003? 

_ NO [If no, proceed to next question (II.3).] 


YES If yes, indicate which of the following changes were involved (mark all 
boxes that apply): 

_ A conversion from paper-based records to an electronic system. 

_ A change from information in a format that is anonymous or non- 

identifiable to a format that is identifiable to particular individuals. 

_ A new use of an IT system/project, including application of a new 

technology, that changes how information in identifiable form is managed. 
(For example, a change that would create a more open environment and/or 
avenue for exposure of data that previously did not exist.) 

_ A change that results in information in identifiable form being 

merged, centralized, or matched with other databases. 

_ A new method of authenticating the use of and access to 

information in identifiable form by members of the public. 

_ A systematic incorporation of databases of information in 

identifiable form purchased or obtained from commercial or public sources. 

_ A new interagency use or shared agency function that results in 

new uses or exchanges of information in identifiable form. 

_ A change that results in a new use or disclosure of information in 

identifiable form. 
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_A change that results in new items of information in identifiable 

form being added into the system/project. 

_ Changes do not involve a change in the type of records maintained, 

the individuals on whom records are maintained, or the use or 
dissemination of information from the system/project. 

_ Other [Provide brief explanation]: 

3. Does a PIA for this system/project already exist? 

_NO _YES 


If yes: 


a. Provide date/title of the PIA: 

b. Has the system/project undergone any significant changes since the PIA? 

_NO _YES 

[The PTA is now complete and after division approval(s) should be submitted to 
FBI OGC/PCLU for final FBI approval and determination if PIA and/or other 
actions are required.] 
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FBI Privacy Threshold Analysis (PTA) Cover Sheet (ogc/pclu (Rev. 07 / 06 / 07 ) 


NAME OF SYSTEM: | 

_1 *>3 

b7E 


FBI SYSTEM CONTACT PERSON 

CLASSIFIED BY NSICG/C3ZW33B91 
REASON: 1.4 (C> 

FBI OGC/PCLU POC 

Name: 1 1 

DECLASSIFY ON: 10-23-2039 

Name: | 1 

Program Office: ITSU/COMSEC 

DATE:: 10-23-2014 

iPhone: 

Division: Security Division 


1 

Phone: | j 


Room Number: jeh 7338 

Room Number: 1B206 



Date PTA submitted for approval: 

2/6/2008 



FBI DIVISION APPROVALS A PiA (and/or PTA) should be prepared/approved by the cognizant program management in 
collaboration with IT, security, and end-user management and OGC/PCLU. (PIAs/PTAs relating to electronic forms/questionnaires implicating 
the Paperwork Reduction Act should also be coordinated with the RMD f orms Desk.) If the subject of a PTA/PIA is under the program 

cognizance of an FBIHQ Division, prior to forwarding to OGC the PTA/PIA must also be referred to the f-'BIHQ Division for program review arid 
approval, if requited by the FBIHQ Division. 



Program Division: Security Division 

FBIHQ.Division: Security Division 

Program Manager 

Signature:/s/ 

Signature:/s/ 

(or other appropriate 

Date signed: 2/12/2008 

Date signed: 2/19/2008 

executive as Division 

Namej j 

Namej | 

determines) 

Title: COMSEC Program Manager 

Title: Unit Chief, ITSU 

Division Privacy Officer 

Signature: 

Signature:/s/ 


Date signed: 

Date signed: 04/08/08 


Name: 

Name: Michael F.A. Morehart 


Title: 

Title: Deputy Assistant Director 


Upon Division approval, forward signed hard copy plus electronic copy to OGC/PCLU (|EH Room 7338), 


FINAL FBI APPROVAL: 


FBI Privacy and Civil Liberties Officer 

Signature:/s/ 



Date Signed: 04/18/2008 



Name: 

David C. Larson 


Title: 

Acting Deputy General Counsel 


pon final FBI approval, FT 
1 - Signed o 
Copies: 


iginal 


,vlll distribute as follows: 

o190-HQ-C1321794 


1 - DOJ Privacy and Civil Liberties Office-Main Justice, Room 4259 

2 - FBI OCIO / OIPP 

1 - FBI SecD (electronic copy via e-mail) 

2* - Program Division POC/Privacy Officer 
2*- FBIHQDivision POC /Privacy Officer 

(*please reproduce as needed for Program/Division file(s)) 


1 - OGC\PCLU intranet website 
1 - PCLU Library 
1-PCLU Tickler 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM: | | *>3 

- b7E 

For efficien cy, a system owner or program manager can be aided in making the determination of whether a Privacy Impact Assessment 
(PIA) is required by conducting and following Privacy Threshold Analysis (PTA). 

Whether or not a PIA is required, the system owner/program manager should consult with the FBI Records Management Division (RMD) to 
identify and resolve any records issues relating to information in the system. 


A PTA contains basic questions about the nature of the system in addition to a basic system description. The questions are as follows: 


A. General System Description: Please briefly describe:| 


b3 

b7E 


1. Type of information in the system! b3 

1 - 1 b7E 

a. If the system is solely related to internal government operations please provide a brief explanation of the quantity and type of 
employee/contractor information: 


Purpose for collecting the information and how it will be used] 


b3 

b7E 


The system's structure (including components/subsystems): CPU, monitor, keyboard, printerj~ 


4. Means of accessing the system and transmitting information to and from the system: All users are provided with a unique 

userid and initial password to access the| | b3 

b7E 

5. Whowithin FBI will have access to the information in the system and controls for ensuring that only authorized persons 
can access the information: COMSEC Staff Only 

6. Who outside the FBI will have access to the information in the system and controls for ensuring that only authorized persons b3 

can access the information ) | is used exclusively by the FBI. b7E 

7. Has this system been certified and accredited by the FBI Security Divisions? X_Yes _No 

8 Is this system encompassed within an OMB-300? _Yes _X_No _Don't Know 

(If yes, please attach copy of latest one.) 


I. Was the system developed prior to April 17,2003? 


YES (If "yes," proceed to Question 1.) 


_X_NO (If "no," proceed to Section II.) 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM: | | b3 

b7E 


1. Has the system undergone any significant changes since April 17,2003? 


_YES If "yes," please explain the nature of those changes: 


(Continue to Question 2.) 

_NO (If "no,"the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, 

and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is required.) 

2. Do the changes involve the collection, maintenance, or dissemination of information in identifiable form about individuals? 

_YES (If "yes," please proceed to Question 3.) 

_NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, 

and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is required.) 

3. Is the system solely related to internal government operations? 

_YES If "yes," is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If yes," afull PIA is required.. PTA is complete.) 

_No. (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for 

review, approval, and forwardingto DOJ's Privacy and Civil Liberties Office. Unless you are otherwise advised, 
no PIA is required. (FBI and DOJ reviewing officials reserve the right to require a PIA.)) 

_NO (If "no," go to section III to determine if afull or short-form PIA is required.) 


II. For systems developed after ApriM7, 2003. 

1. What is the purpose of the system? (Answer in detail unless details already provided in A. 2 above): 


c 


sE 




~~|many US Federal Government Agencii 


Field Offices (FOs) and Resident Agencies (RAs). [ 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) (OGC/PCLU (Rev. 07/06/07) 

NAME OF SYSTEM: | | t>3 

- b7E 

(Continue to Question 2.) 

2. Does the system collect, maintain or disseminate information in identifiable form about individuals? 

_YES (If "yes," please proceed to Question 3.) 

X_NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, 

and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is required.) 


3. Is the system solely related to internal government operations? 

_YES If "yes,” is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (Ifyes/'afull PIA is required.. PTA is complete.) 

_No. (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) 

for review, approval, and forwardingto DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise 
advised, no PIA is required. (FBI and DOJ reviewing officials reserve the right to require a PIA.)) 

_NO (If "no," go to section III to determine if a full or short-form PIA is required.) 


Full orShort-Form PIA 


1. Is the system a major information system (as listed on OGC's FBINET website)? 
_YES (If "yes," a full PIA is required. PTA is complete.) 

_NO (If "no," please continue to question 2.) 

2. Does the system involve routine information AND have limited use/access? 


_YES A short-form PIA is required. (l.e.,you need only answer Questions 1.1,1.2,2.1,3.1,4.1,5.1 (if appropriate), 6.2,6.3, 

and 8.9 of the PIA template.) Please note that FBI 
and DOJ reviewing officials reserve the right to 
require completion of a full PIA. (PTA is 
complete—forward with PIA.) 


(If "no," a full PIA is required. 


PTA is complete.) 


3 
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(If yes, proceed m qite&tios ?.f 



separate notice)? 

NO IThe program will need to week with PO..IJ to develop/lurpfeowot 
this oeeessary .fomr(s}<j 


YFS Identify any forma, paper or electronic. used to re go eat $«eh 
mfb.ro.mdoo front the information sohjectt 

Are Social Securitv Number.-- tSbNsl cullooted, maintained or disseminated from. 



Yes information systems operated by contractors for the FBI tutor be 
considered Privacy Act -systems -of records, the federal Acquisition Regulation 
contains standard coo tract clsowr- that must bo Included in the event the system 
oo I leers, maintains or disseminates Fit and additional requirements may be 
imposed as a matter of Department of Justice policy. C oosuinnions with the 
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N , - s tUHOH'te 1 \i I hFOM \ 


NAME: | | b3 

b7E 

9 , K-’a t v nAa.m \ \ . 1 . <n>" vA Em ! \ E 

W an ;> I > t to mt s Ma i > i,' 

_\E If Ownohs <lU K WOO O l A S POO ! !U^ pSs'SoU ailKk'^iKu' 

caMpleikm elate: 

X YBS If. yes, please Indicate the following, If known; 


b3 

b7E 


AsallaMIlty; _ i ^\\ M-derau \ Utah l odefouxi 

_Not applicable - this system is only paper-based, 

f p X 7 3~ ”\ s ii it ! <• f s s -s x ~ I l ^ 

wi ^ -E \ N'(>,e ", 

X NO 

_YES if yes, please describe the data miaiag fnneiloni 

NO X YES 

X This h a new system/ prelect in development [If yon checked tils hloetg 
STOIY I be FT A is now complete and ofier division eppriwolCs) sbnnid be 
sobmdted to FBI OCIOBC'1,11 tor final FBI approval and defavminntlno if 
IN A and/or other aetloos are regnimii 

IL l\iMiVW\\n \I\ MIONpin 

1, V^'b-o wa\ ;hr -'>stem pseuxu ee\ donee' 

2. Has the system/projeot undergone any significant changes since April ] ?, 2003? 

f;N<: : EA.SSlFO:?D//I'OROFF]CIA.L INF ONLY 


I ctareoily has authority to operate 
(A YO) through March, 2012 ami bus the folio wing risk levels: 

Confteeotlaiity; tow Moderate JX Emh Undefined 

Integrity; _Low Moderate X Biglt Fodetmed 
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YFS If vox. indicate which of the tohewing chargee were -evoived umtrk all 
change that appha am! provide brief eapbmabtm far *ad* .marked rksttgr): 
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NAME: 
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lm: L ANNO I E MFOROFFICi At OSE ONLY 

a. Provide daie/fitle of tlae PI A: 

.NO .YIN 

pNe FT A jo now compose ant! after tiNBOa ap|srovalN) Ouatki fanottoaONatl to 
FBI ONCOCLB Or food FBI aftprava! and deOrmNaOno APIA andon other 
aetkaw arr repskr-edd 
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FBI PRIVACY THRESHOLD ANALYSIS (FTA) 


NAM E OF SY STEM / .PROJECT-: !:0 

(Esio-nn 

S1KB FBI CO<|«e Ass? 


i SV8TEM/FPOJECT POC 


FBI OGC/FCLE POC 


Hmne|_ 

H-NnmMr: N:.H 7 


I 50 |»|\ 5MO\ DUll GN'POX M ^ 



Mograsn Manager for other apprnnrbse j Division Annoy Onber 

.‘\U <' >N ' ' N ' U , *. i 

f Tog ra m Pi vis-on: 

Of Ties of the Coneral 
Coisaf 

n a.m'ioc | I a . ' n 

Name: | " | ! Name; 

Policy Ore; 

h ; BIRQ Division 
ii Office of IT 

i Masmcereenr On bf>o : 

urvaYj 

**H' ~1 i N»i«: 1 ‘ 1 


A rrs:r ,;:.sl dhMhm opmd OeM :?i> gpa C:c:5; s0cep PfPi OGCOCLE iJEli 73 MR 
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FINAL FBI APPROVAL. PP1TRM! HO\a LOARmOAO 


System dears sr>r codeci. ntemadte or dissemmaie Pli i 

_SysKati A gramitadteted {in existence before te'tedibbe; no Liter changes posing :dgob'ica.oi privacy risksa ; 

iniormaLon in lire system mimes la inaraal yovernntenl onetedmns. ; 

System inn; bams pres >ossiy assessed under an evaioatmn samite re a Li A. i 

bio aigaibosini piivaay issrias {<sr prisacy !sv:-es a;a aaahaagedr , ^ i 

..p:.. (Alter Osa,ariase ^ p AJMAj Ao/-A P ala ^ ^ 

Jagg. rAAlA teptea/SpA,,. ,p ' AteLyO/ /As igegAe.a pp p L : ;.,A step ; ,psp, ; / A ;< A;'pA,yyd:<AA;r.teA» A 


AaeUcahie SORAsI: 

' 'PiA 
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I. INFORMATION ABOUT THE SYSTEM / PROJECT 


i. Provide a geoerstf dese.n.f.tfkm ol the system or project that Includes: (a) »&me of 
iht swreot project, loeBnBn;: .wsosnuYd .tempmtw. 'O' sttuettwY ofthe 
sy■stem/project, including ioterco«no«tk>os with other projects or systems; |e) 
purpose of the systfcm/proji-cf; (<f) nature of the inform at km m the system/project 
mad him it will he used; (ej o ho whl hove access to the mfororotkm ho the 
system/project: (.1) and the manner of troosorlsvioo to all users. 

The Discovery Policy and Coordination 1-nit's mission Is lo support the OBke of the General 

' V S V N S I I k7E 

I 1 ' I 

I I b7E 


Historically., FBI compliance with legal discovery repuiremenP; p,cased primarily on retrieving, 
and prodneing relevant information tonnd widen FBI paper records. The proliferation of 
electron to common leationtt methods (be.. e-onn: hiaekixosoes, instant messaging. Blogs, liar 
serves, ate.}, however, lets restrks-d a- the e reshoo of an expsmemlaliv larger volume of 
electronically stored information, hole meow; sod non-record. This reselling Increase 
significantly complicates the FBI's ability ot ukrnlty preserve, collect and analyse potentially 
relevant F.%1 as part of the discovery process. The traditional approach of using multiple, 
disparate tools sod resources so otmdoet c-Dlscovery. gumshoe days processing the data, sstd 
weeks condnenng the resdesv -s slow, expensive and risky . 

ITsi dlifers from paper mformakon hevaoso of Its Intangible Bony volume, transience and 
perdstsnee. ESI. both record and non-record, in ns native 'format generally also contains 
metadata, os- data shoot the data, which is not present In paper documents. To be legally 
compliant, iherelore. the FBI noon identify, collect nod preserve doth the paper document and its 
electronic coo me own (if available?. While (he preservation on FSi metadata is essential to 
effective document analyses.: metadata creates special challenges to prevent spoliation because It 
can he easily and nnsvittingly altered. 
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solves of Fbu ei-sarina due umcmudK reiev.ud b.Si is eocosocd iV->m aUamuo.n of dciedon 

A Processmi.c AmdvUs. and Review - Ida objective of das phase is to reduce she voiume ssf 

eiectrtmU analysis nubs barmy dm; phase represents on -he biggest cost savings of the c- 
Discovery process. 

3. IVodcetioo end Prescnbrhon - The fired phase relates ro delivering the aeieoted hi Si to Use 
requesting panics in various mesh a and formats. Presentation of -Tea is gemma iy the 
respemsibihty of the Assistant United Stales .Attorney: hyoeveo rite FBI may used to provide 

Ad srf ibese processes are dissected in detail at .FDRMnet, in the Fseotromc Discovers 

_ s 
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